Koozali.org: home of the SME Server

can´t change user password from the web (WAN SIDE)

Offline oscartenerife

  • ***
  • 65
  • +0/-0
can´t change user password from the web (WAN SIDE)
« on: November 06, 2008, 12:23:42 AM »
Hi everybody:

Coming back to this forum once.
I've my SME 7.xx server working great since the last one year.
There's  something that I would like to do, what is "CHANGE USER PASSWORD FROM THE WEB through the Internet Browser but each time I try, a message shows up. "FORBIDEN - USer don´t have authorization to change.....
According on what I've understood from the Administration Manual (and is not completely clear for me), user password command  (In my case www.mydomain.com/user-password), can be issued only from the local LAN. Otherwise a PPTP should be created.
Can anybody help on this issue.

Thank's in advance - OSCAR

Offline m

  • *****
  • 276
  • +0/-0
  • Peet
Re: can´t change user password from the web (WAN SIDE)
« Reply #1 on: November 06, 2008, 03:27:29 AM »
According on what I've understood from the Administration Manual (and is not completely clear for me), user password command  (In my case www.mydomain.com/user-password), can be issued only from the local LAN. Otherwise a PPTP should be created
That is correct. If you don't have a VPN access, you can allow Remote Management for specific networks/mask in the servermanager. But be aware that you then also have opened access to server server-manager, which both can be a security issue.

Offline oscartenerife

  • ***
  • 65
  • +0/-0
Re: can´t change user password from the web (WAN SIDE)
« Reply #2 on: November 06, 2008, 10:51:01 AM »
First of all, thank you for your answer.

Do you mean that I can set VPN access for a user, for him to be able to set or change his password from the web, avoiding remote management, wich I agree with you is not so good for safety reasons, specially because server-manager will be available as well ?

That is correct. If you don't have a VPN access, you can allow Remote Management for specific networks/mask in the servermanager. But be aware that you then also have opened access to server server-manager, which both can be a security issue.

Looking forward to ear from you. Regards.